Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/iDxR5e4c2kTHVL-u0ae4bB5UJy4.roa
File:                     iDxR5e4c2kTHVL-u0ae4bB5UJy4.roa (raw, json)
Hash identifier:          wtURa58PNywoRZygFVQ5aXTtMiodIhMTBkUMNwiWL+E=
Subject key identifier:   88:3C:51:E5:EE:1C:DA:44:C7:54:BF:AE:D1:A7:B8:6C:1E:54:27:2E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01CE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iDxR5e4c2kTHVL-u0ae4bB5UJy4.roa
Signing time:             Mon 01 May 2023 01:33:34 +0000
ROA not before:           Mon 01 May 2023 01:33:34 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        111.110.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:34 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=883C51E5EE1CDA44C754BFAED1A7B86C1E54272E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:71:1f:8c:48:ad:0e:7c:b7:90:35:38:26:
                    97:5e:bd:0b:c6:0d:da:22:06:60:33:3d:a9:c9:79:
                    11:34:6a:4f:e0:0d:83:a3:c6:7d:28:e8:1f:83:e3:
                    f5:06:d9:db:f5:e5:63:dc:e8:41:58:01:ea:70:0f:
                    e6:9a:2f:c8:14:ca:6f:e1:60:c2:c1:1b:a4:cf:a5:
                    03:ad:c2:60:da:7d:1e:1b:0b:0b:b0:73:bd:c8:3c:
                    6b:0e:60:43:de:d6:cc:be:ae:6f:aa:2b:5c:65:45:
                    8e:ea:89:23:94:4c:a3:90:5e:f1:ba:d1:99:d1:4d:
                    9d:fa:06:2e:09:2f:c0:0f:75:77:30:d2:9d:6c:dc:
                    97:3c:80:7a:47:be:1c:2f:76:c2:d5:5b:37:25:a9:
                    e7:6d:9c:6b:07:8c:3d:4d:16:e7:94:1e:bd:4d:bb:
                    35:22:4b:0b:5d:bd:57:b6:f3:03:3b:4e:f3:f3:a5:
                    d6:01:a8:2d:9f:26:5a:24:15:2d:ce:6b:e2:90:34:
                    00:e5:db:87:a1:33:66:f8:48:3f:69:16:c6:1e:c7:
                    3a:a0:f0:f1:c5:c8:3a:cf:02:5a:99:6b:1d:47:f9:
                    3e:80:ef:78:be:df:88:92:36:4d:7f:d7:1e:aa:3d:
                    12:f2:c5:f4:0a:6f:47:8d:e4:14:15:15:0c:87:94:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3C:51:E5:EE:1C:DA:44:C7:54:BF:AE:D1:A7:B8:6C:1E:54:27:2E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iDxR5e4c2kTHVL-u0ae4bB5UJy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:16:e0:3a:0f:48:d1:e4:42:0b:f8:c4:27:91:d9:d5:86:8c:
         df:db:43:54:00:0d:47:0f:e7:f5:7f:15:66:75:ba:cd:8c:82:
         71:de:19:cb:90:56:27:01:9d:9a:1a:42:be:41:d5:bc:d2:93:
         ee:10:bd:ec:43:d0:56:ed:4f:86:2d:8b:08:d8:e6:e1:4f:1f:
         7e:d1:8e:19:80:94:a5:e6:15:24:1d:8d:29:ba:6c:fc:44:b4:
         aa:fc:aa:cd:29:4a:a2:df:c9:7b:1b:8f:50:e8:03:be:df:cf:
         24:7b:6c:ab:95:69:44:64:f5:d6:fc:a0:21:34:47:4e:69:65:
         b2:7e:cc:e1:9a:54:d2:69:6c:f0:4b:c1:bf:a4:f7:ff:5b:a8:
         5a:e7:6d:23:6f:9d:3a:75:61:7a:57:dd:6a:2a:52:2f:54:21:
         1e:a9:63:53:ba:ff:18:e6:1e:53:1c:10:23:6f:c5:0e:92:e6:
         d1:77:08:57:2f:42:0d:43:93:6a:de:ba:61:8b:5c:f4:dc:b1:
         86:6f:91:b1:cc:31:04:2c:b7:a7:0e:83:18:b4:4f:2a:78:5a:
         35:23:8b:47:c9:c8:3c:48:51:62:2a:04:1c:dc:1d:b9:7b:c3:
         fe:20:ad:e4:93:4b:20:31:da:7d:65:b3:7b:a9:0b:3f:cd:0d:
         0c:3f:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org